WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability

CVE-2023-36528

What is CVE-2023-36528?

A missing authorization vulnerability exists in the FeedbackWP kk Star Ratings plugin that allows attackers to exploit incorrectly configured access control security levels. This can potentially enable unauthorized users to manipulate ratings without proper authentication. The flaw affects several versions of the kk Star Ratings plugin, creating risks for WordPress site owners who fail to apply necessary security measures. Ensuring proper configuration and timely updates is essential to mitigate exposure to this vulnerability.

References